Privacy Policy
The Thought Co. is a psychologist-led practice in Lower Parel, Mumbai. Under the Digital Personal Data Protection Act 2023 we are a Data Fiduciary, which means we decide what personal data we hold about you and why, and we are answerable for it.
This page covers everything we hold. What your psychologist can and cannot share about your care is a separate and stricter matter, set out on our Confidentiality page.
What we collect
When you book or attend a session: your name, contact details, and what you tell us at intake about why you are coming.
Clinical records: your psychologist keeps notes of your sessions, and where relevant your intake responses and assessment scores. This is health data and we treat it as the most sensitive thing we hold.
When you pay: payments are processed by Razorpay. Neither we nor Razorpay store your card details. We keep a record that a payment was made, for what, and when.
When you buy from our shop: your name, delivery address and email, so we can send you what you ordered.
When you use the website: your IP address and basic browser information. Our free tools, including the anxiety test and the check-ins, are scored in your browser. Those answers are never sent to us and never stored.
When you subscribe: your email address, and only if you asked for it.
Why we hold it
To provide your care and keep a proper record of it. To take payment. To send you what you ordered. To send you writing you asked to receive. And where the law requires us to keep or produce something.
We do not sell your data. We do not share it with advertisers. We do not use anything from your clinical record to market anything to you.
Where it is held
Client records are held in Google Workspace, under access controlled by the practice. Payments are processed by Razorpay. This website and our shop run on Shopify. Each of these processes data only to do the job we use them for, and where a provider stores data outside India, the laws of that country may also apply to it.
How long we keep it
Clinical records are kept for two years after your last session, and then deleted.
Payment and order records are kept as long as tax and accounting law requires. If you subscribe to our writing, we keep your email address until you unsubscribe.
If you complete an intake form and do not go on to book, we keep those details.
Your rights
Under the DPDP Act you can ask us for a copy of the personal data we hold about you, ask us to correct anything inaccurate, ask us to erase anything we are not required to keep, and withdraw consent you previously gave.
Session notes are a particular case. If you ask for them, we will give you a written summary of your notes rather than the raw notes themselves. Clinical notes are working documents written by your psychologist for their own use in your care, and a summary is both more useful to read and more accurate to what the record means.
To make any of these requests, write to priyanka@thethoughtco.in.
Clinical supervision
No identifiable client details are shared with anyone, including in clinical supervision.
If something goes wrong
If your personal data is ever exposed through a breach, we will tell you, and we will notify the Data Protection Board of India as the DPDP Rules require.
Age
Our services are for adults. We do not see clients under 18.
If the practice changes hands
If The Thought Co. is ever acquired or merged, your records do not transfer automatically. You decide. If you choose to continue therapy with the practice under its new ownership, your record moves with you. If you do not, your record is deleted.
Complaints
Write to priyanka@thethoughtco.in first. We would rather hear it directly. You also have the right to complain to the Data Protection Board of India.
Changes
We post changes here and date them.